mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
cover three platforms the built-in cms scanner misses (it only handles wordpress, drupal and joomla). markers are structural: generator meta, framework-specific js init and asset paths, not bare brand strings, so a page that merely mentions the cms does not match. ghost also extracts its version from the generator meta.
28 lines
483 B
YAML
28 lines
483 B
YAML
# TYPO3 CMS Detection Module
|
|
|
|
id: cms-typo3
|
|
info:
|
|
name: TYPO3 Detection
|
|
author: sif
|
|
severity: info
|
|
description: Detects TYPO3 CMS installations
|
|
tags: [cms, typo3, detection, info]
|
|
|
|
type: http
|
|
|
|
http:
|
|
method: GET
|
|
paths:
|
|
- "{{BaseURL}}"
|
|
- "{{BaseURL}}/typo3/"
|
|
|
|
matchers:
|
|
- type: word
|
|
part: all
|
|
words:
|
|
- "/typo3conf/"
|
|
- "/typo3temp/"
|
|
- "data-namespace-typo3-fluid"
|
|
- 'generator" content="TYPO3'
|
|
condition: or
|